Skip to content
OpenAdvisories

Archive

February 2021

Vulnerabilities first published in this month (UTC), newest first.

← January 2021 2021 / February March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

1,464 results · Feed

  • Critical 9.6
    CVE-2020-13564 EPSS 76%

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP re…

  • Critical 9.6
    CVE-2020-13563 EPSS 76%

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP re…

  • High 8.5
    CVE-2021-21277

    Angular Expressions - Remote Code Execution

    angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compile(userControlledIn…

    peerigon angular-expressions angular-expressions npm
  • Critical 9.6
    CVE-2020-13562 EPSS 78%

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP re…

  • Critical 9.8
    CVE-2021-23330

    Command Injection

    All versions of package launchpad are vulnerable to Command Injection via stop.

    launchpad npm
  • Medium 6.4
    CVE-2021-21266

    XXE vulnerability in OpenHAB

    openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.5.12 and 3.0.1 the XML external entity (XXE) attack allows attackers in the same network as the openHAB instance to retrieve internal infor…

    openhab openhab-addons
  • Unscored —
    CVE-2020-24271

    A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/i…

  • Unscored —
    CVE-2020-36109 Public exploit

    ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi functio…

  • Unscored —
    CVE-2020-28194

    Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length fi…

  • Unscored —
    CVE-2021-3350

    deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter.

  • Unscored —
    CVE-2021-3349

    GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted k…

    evolution evolution Debian Alpine
  • Unscored —
    CVE-2021-3348

    nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2020-13858

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented…

  • Unscored —
    CVE-2020-15836

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function passes untruste…

  • Unscored —
    CVE-2020-15835

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function contains undocu…

  • Unscored —
    CVE-2020-15834

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in…

  • Unscored —
    CVE-2020-15833

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified t…

  • Unscored —
    CVE-2020-15832

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented c…

  • Unscored —
    CVE-2020-13860

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the und…

  • Unscored —
    CVE-2020-13859

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with…

  • Unscored —
    CVE-2020-13856

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download …

  • Unscored —
    CVE-2020-13857

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sendi…

  • Unscored —
    CVE-2020-26547

    Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon (XEP-0280) results. This allow…

  • Critical 9.3
    CVE-2021-21276 Public exploit

    Privilege escalation in Polr

    Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' s…

    cydrobolt polr